can I create custom notifications and send them to the UI on demand?

[dhaffner]

I was wondering if it is possible to send a message to the users currently logged into the UI as a warning that we are going to restart Splunk. Is there any way to do that? Maybe send a message that will display across the top in red, like errors and "restart required" messages do. If not, it would be a really nice idea. We have a few hundred users and it would be great to send out a warning to them somehow.

Thanks!

[yannK]

Since Splunk 6 you can now post maintenance messages on a search-head


curl -k -u admin:changeme https://localhost:8089/services/messages -d severity="warn" -d name=message -d value="This is your Splunk Admin, there will be a maintenance of this instance in 10 minutes -> 15:00 , ETA of 30 minutes -> 15:30, for updates contact me at YourFriendlyNeighborhoodAdmin@mydomain.com"

[the_wolverine]

Looks like this is stored in memory so the message will be lost if the server is restarted.

[jrodman · Accepted solution]

The bulletin board system (that makes those banners) doesn't have user controllable access points currently.

[Ellen]

Exists an ENH-4203

[dhaffner]

Understood. Good job, though! Maybe we can start a push to make the process easier. 🙂 Thanks again!

[jrodman]

That was an experiment. As a customer I really hate it when companies tell me to file something again, via another means. Internally, I had to do some evil things to make it happen, so not sure you'll get that again 😛

[dhaffner]

Thanks for opening the ER for this! 🙂